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(54) RANDOM-NUMBER GENERATING SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To obtain a safe random-number 
generating method at a low cost by providing the above system 
with a random-number updating section which determines the next 
kind according to the random number kind, and an operating 
system which updates the random number kind at arbitrary timing. 
SOLUTION: A processing section 11 of the operating system forms 
a random- number system for a prescribed length by repeating a 
cipher section 1, while updating input by an X register 5 and an 
adder section 9 with the value of an A register 3 as an initial value. 
Output values are stored in an r1 register 7 and an r2 register 8 by 
repeating a Y register 6 and an adder section 10 with the value of 
a B register 4 as an initial value and are respectively stored in the 
A and B registers for the purpose of random-number generation of 
the next block. The operation system increments the A and B 
registers with arbitrary timings. Since a secret key cipher E which 
is the function originally disposed at an IC card and the operating 
system are utilized, additional hardware/ software is made few. 



4 * W 



4 > 9 *\ t ^ y 



X 



Cun>U-[- 











J 



LEGAL STATUS 

[Date of request for examination] 

[Date of sending the examiner s decision of 
rejection] 

[Kind of final disposal of application other than the 
examiner's decision of rejection or application 
converted registration] 

[Date of final disposal for application] 

[Patent number] 

[Date of registration] 



http://www1 9.ipdl.jpo.go.jp/PA1 /result/detail/main/wAAAgyaq6sDA41 3005384P276.htm 2004/08/20 



per 



WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 




INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(51) International Patent Classification 5 : 
G06F7/58 



Al 



(11) International Publication Number: WO 93/23804 

(43) International Publication Date : 25 November 1 993 (25. 1 1 .93) 



(21) International Application Number: PCT/SE93/004I4 

(22) Internationa] Filing Date: 1 1 May 1993 (1 1.05.93) 



(30) Priority data: 
9201498-4 



12 May 1992(12.05.92) 



SE 



(71) Applicant (for all designated States except US): TELEFON- 
AKTIEBOLAGET LM ERICSSON [SE/SE]; S-I26 25 
Stockholm (SE). 

(72) Inventor; and 
(75) Inventor/Applicant (for US only) : HOFVERBERG, Mikael 

[SE/SE]; MargaretavSgen 14, S-175 35 Jarffclla (SE). 

(74) Agents: GRAUDUMS, Valdis et ah; Albihn West AB Box 
142, S-410 22 GSteborg (SE). 



(81) Designated States: GB, JP, US. 

Published 

With international search report. 



(54) Title: APPARATUS AND METHOD FOR RANDOM NUMBER GENERATION 



(57) Abstract 

The invention relates to an apparatus and a method for random number 
generation. The apparatus comprises a feedback shift register (10) which re- 
ceives signals from a first signalling device, the shift register (10) further being 
connected to at least one delay device (d,, dj. This or these delay device(s) 
deliver (each) a random number when receiving a clock signal from a sec- 
ond signalling device (2). The first signalling device (1) comprises a fast 
clock and the feedback shift register (10) is connected to the delay device(s) 
(d, d n ) via at least one logical gate (g u ... g n ), the outputs) of delay de- 
vices) (d,. .... d n ) being fed back to said gate(s) ( gl> gn ), the second sig- 
nalling device (2) delivering clock signals originating from external events 
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5 TITLE 

Apparatus and method for random number generation 
TECHNICAL FIELD 

10 

The present invention relates to an apparatus for random 
number generation comprising a feedback shift register 
which receives signals from a first signalling device, the 
feedback shift register being connected to at least one 

15 clocked delay device which upon receiving a clock signal 

from a second signalling device produces a random number. 
Such devices find e.g. their use within radiocommunication, 
for production of crypto-keys etc. The requirements that 
random numbers, both random numbers produced by one and the 

20 same apparatus as well as random numbers produced by 

different apparatuses are as uncorrected and unpredictable 
as possible. 

There is furthermore often a need of a random number 
25 generator which may be integrated in an LSI (Large Scale 

Integration) -circuit. 

STATE OF THE ART 

10 An apparatus of the abovementioned kind is given by 

US-A-4 905 176. In this known apparatus On-chip noise- 
sources are used as a first signalling device. Such On-chip 
noise sources are both difficult and expensive to fabri- 
cate. Moreover they consume much current. Furthermore the 

t5 random numbers which are generated by this apparatus do not 

originate from external events but depend on parameters of 
the LSI such as for example material and constitution, the 
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circumstances prevailing at its fabrication and so on. 
Since the random numbers come directly from the outputs of 
a large PN-register, in case a such is used, different 
apparatuses which are started up and driven simultaneously 
will generate the same random number. Moreover, different 
inputs from the same PN sequence are used as the input to 
the logical gate (XOR) . A further inconvenience with this 
apparatus is that the random numbers merely can be obtained 
in series and not parallelly. 



In other known apparatuses noise diodes are used which 
generate noise which is amplified and quantified. In this 
manner generated random numbers are read by a computer. 
Random number generators of this kind require a large 
15 number of discrete and integrated components and it is 

f urthermore not possible to integrate the whole random 
number generator in an LSI. Furthermore these apparatuses 
require high voltages, such as approximately 20 V as well 
as high currents, e.g. more than 50 mA. 



SUMMARY OF THE INVENTION 



It is an object of the present invention to provide an 
apparatus for generation of random numbers which give as 

25 good and uncorrolated random numbers as possible, and 

wherein different apparatuses produce different random 
numbers. It is furthermore an object of the invention to 
provide an apparatus which do not require high currents and 
which only requires a low voltage. Preferably the apparatus 

30 consumes less that l mA and merely requires about 5 V. A 

further object of the invention is to provide a random 
number generator which is entirely digital , easy to 
integrate, particularly in an LSI, and which can be 
fabricated in a cheap way and by cheap components. 
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These objects as well as others are achieved through an 
apparatus of the aforementioned kind wherein the first 
signalling device comprises a fast clock, the feedback 
shift register is connected to the delay device/ devices via 
at least one logical gate, the output (s) delay device (s) 
further being fed back to said date/ gates, and wherein 
clocking signals from the second signalling device orig- 
inate from external events. 

It is also an object of the invention to provide a method 
for generation of random numbers by which the in the 
foregoing mentioned objects are achieved. 

15 The objects are achieved through a method wherein a random 

number generated by one apparatus is independent of a 
random number simultaneously generated by another appar- 
atus, wherein a PN-register receives a clocking signal from 
a first signalling device, the PN-register being connected 

20 to at least one delay device, preferably a D-f lip-flop 

which from a second signalling device receives an 
asynchronous, external signal and which thereupon produces 
a random number, wherein the data entrance of the delay 
device is connected to the PN-register via a logical gate, 

25 preferably an XOR-gate, the output from the delay device 

furthermore being fed back to the XOR-gate (s) , and the fast 
clock delivering signals with a clocking frequency f, which 
essentially exceeds the clocking frequency f 2 of the second 
signalling device and parallelly delivering of clock 

30 signals to the delay devices from the second signalling 

device . 

Preferred embodiments are given by the characteristics in 
the subclaims. 
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The feedback shift register preferably comprises a so 
called PN-register, i.e. Pseudo-Noise-register. This PN- 
register particularly receives signals from the first 
5 signalling device comprised by a fast clock. Particularly 

this fast clock has a clocking frequency which is so high 
that the PN-register manages to wraparound between each 
clock signal delivered by the second signalling device 
which produces signals for the delay device (s) . For an 18- 

10 bit PN-register the frequency may according to a preferred 

embodiment e.g. be about 1 MHz. In this case the register 
wraps around about four times per second. Preferably the 
logical gate/gates are so called XOR-gates. Particularly , 
the output thereof is connected to the data-entrance of a 

15 D-type flip-flop the Q-output of which in turn is fed back 

to the logical gate. Through a feedback coupling of this 
kind the random number will depend on what has happened in 
the preceding step which in turn depends on the preceding 
step etc. 

20 

According to a preferred embodiment the apparatus comprises 
a number of clocked delay devices (i = 1, n) 
connected in parallel for parallel generation of 
(i = 1/ ... r n) random numbers. Particularly at least a 

25 number of bit positions of the feedback shift register may 

be connected each to a separate logical gate, the ouput of 
each logical gate being connected to a separate clocked 
delay device, especially a D-type flip-flop, furthermore 
each delay device or D-flip-flop being fed back to its 

30 respective logical gate (XOR-gate) an a the delay devices 

being parallely connected to the second signalling device 
for obtaining external, asynchronous signals. These signals 
come from external events from outside the apparatus that 
comprised by the random number generator, for example from 

35 the keyboard of the computer, if the keyboard is seen as an 

external device or through the RS-232-interface or similar. 
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It may also be an asynchronus communication with other 
units or similar; it being essential that the signals orig- 
inate form external events. Therethrough a random number is 
produced which differs from one apparatus to another 
apparatus even it produced simultaneously. The apparatus is 
more particularly so constructed that it easily can be 
integrated in an LSI-circuit. 

DESCRIPTION OF THE DRAWINGS 

The invention will in the following be further described by 
reference to the accompanying drawings , which are given for 
explanatory, by no means limiting, purposes, wherein 

15 Fig. 1 shows a block diagram of an apparatus for parallel 

generation of a number of random numbers according 
to the invention, 
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Fig. 2 shows a system comprising an apparatus for genera- 
tion of random numbers according to the invention, 

DETAILED DESCRIPTION OF THE INVENTION 

The apparatus for random number generation according to 
25 Fig. 1 comprises a feedback PN-shift register 10. This PN- 

register receives signals from a fast clock 1. In the shown 
embodiment each bit position in the PN-register 10 is 
connected an XOR-gate (g,, g 2 , g n ) . The output of each 

X0R-gate(g t , . . . , g n ) is connected to the data-entrance D of 
30 a delay device (d,, . do). The "Q"-output (non- inverting) 

of the delay device (d,, . . . , dj , e.g. a D-f lip-flop is fed 
back via a feedback loop to the corresponding logical gate 
(Sir •••/ g D ) • The D-f lip-flops or delay devices d,, d,, 
are connected in parallel to a second signalling device 2 
35 from which they receive an asynchronus, external signal. 

The events or signals from this second signalling device 2 
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originate from external, asynchronus events taking place 
outside the apparatus for random number generation itself * 
These events may e.g. come from asynchronus communication 
with other units, through the RS-232-interf ace etc. Since 
5 the frequency of the first signalling device 1, i.e. the 

fast clock is so high that the PN-register 10 manages to 
wraparound at least once between each signal from the 
second signalling device 2, very good, to the greatest 
extent uncorrolated random numbers i, i = 1, 2, . n ) 

10 (RND bit l r RND bit 2, RND bit n) are obtained at the 

Q-output of the respective D-f lip-flop d u . d^. If an 
18-bit PN-register is used, the clocking frequency of the 
fast clock on the first signalling device 1 may be around 
1 MHz which would mean that the PN-register wraps around 

15 about four times a second. The delay devices d 1# . . . , d^ 

(the D-f lip-flops) produce a random number each time a 
signal is received from the second signalling device 2. 
Since the events delivered from the second signalling 
device have an external origin i.e. come from outside the 

20 probability that two arrangements comprising an apparatus 

for random number, generation would generate the same random 
number is minimal. 

In -Fig. 2 an example of a system comprising an apparatus 
25 for random number generation according to the invention is 

shown, the random numbers being fed to a micro processor 
with a number of external interfaces, a keyboard and a 
random number generator, D-bus meaning data-bus and A-bus 
meaning address-bus. The IRQ-signals (interruption request) 
30 from the external interface and the keyboard generate a 

signal "event" which was described above. The fast clock is 
for example generated by an external oscillator, osc. 
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The invention shall of course not be limited to the shown 
embodiments but can be freely varied within the scope of 
the claims, for example is it possible to, for certain 
5 applications, merely have one delay device and one gate 

respectively for obtaining one random number whereas in 
other applications a number of parallel random numbers are 
required. Furthermore the PN-register does not necessarily 
have to be an 18-bit register etc. 
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Claims 

5 

1. Apparatus for random number generation comprising 
a feedback shift register (10) which receives signals from 
a first signalling device (1) , the feedback shift register 
(10) being connected to at least one clocked delay device 

10 (d lr dj which upon receiving a clock signal from a 

second signalling device (2) produces a random number , 
characterized in that the first signalling 
device comprises a fast clock, that the feedback shift 
register (10) is connected to the delay device/devices 

15 (di/ •••/ dj via at least one logical gate (g,, g n ) f 

the output (s) of the delay device (s) (d,, dj further 

being fed back to said gate/gates (g Ir g n ) , the clock 

signals from the second signalling device (2) originating 
from external events . 

20 

2. Apparatus according to claim 1, charac- 
terized in that the clock signals from the second 
signalling device (2) originate from asynchronous, external 
events . 

25 

3. Apparatus for random number generation according to 
claim 1, characterized in that the feedback 
shift register (10) comprises a so called PN-register. 

30 4. Apparatus according to claim 3, 

characterized in that the logical gate 
(9i* — # g n ) comprises an XOR-gate. 



35 



5. Apparatus according to claim 4, charac- 

terized in that the delay device (d^ . . . , dj 
comprises a type D-flip-flop. 
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6. Apparatus according to any one of the preceding 
claims, characterized in that it comprises a 
number of delay devices d } (i « 1, . .., n) connected in 
parallel for generation of i (i = 1, — , n) random numbers 

5 parallelly. 

7. Apparatus according to claim 6, charac- 
terized in that at least a number of bit-positions 
of the feedback shift register (10) are connected to each 

10 a separate logical gate (g lt . .., g n ) , the output of each 

gate being connected to a separate clocked delay device 

(d Jf dj , the output of each delay device (d,, , dj 

furthermore being fed back to its respective logical gate 
(9n , g n ) the delay devices (d,, , dj being parallely 

15 connected to the second signalling device (2) for receiving 

of external, asynchronus signals. 

8. Apparatus according to anyone of claims 1-5, 
characterized in that the fast clock (1) has 

20 a clocking frequency f,, which essentially exceeds the 

clocking frequency, f 2/ of the second signalling device (2) 
so that the PN-register (10) wraps around at least once 
between two consecutive clocking signals from the second 
signalling device (2) . 

25 

9. Apparatus according to claim 7, charac- 
terized in that the fast clock (1) has a clocking 
frequency f,, which essentially exceeds the clocking 
frequency, f 2 , of the second signalling device (2) so that 

30 the PN-register (10) wraps around at least once between two 

consecutive clocking signals from the second signalling 
device (2) . 
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10. Apparatus according to claim 9, charac- 
terized in that the PN-register (10) is an 18 -bits 
PN-register and that the clocking frequency , f lr of the 

5 first signalling device (1) is about 1 MHz . 

11. Apparatus for random number generation according to 
anyone of claims 1-5, characterized in that 
it is integrated in an LSI-circuit. 

10 

12. Apparatus for random number generation according to 
claim 7, characterized in that it is inte- 
grated in an LSI-circuit. 

15 13 . Apparatus for random number generation according to 

claim 5, characterized in that the data 
entrance of the delay device(s) (d^ dj being connec- 

ted to the PN-register (10) via XC>R-gates, the output of 
the delay device (d lr dj further being connected to an 

20 XOR-gate (g Ir g D ) via a feedback loop, the second 

signalling device parallelly delivering clocking signals to 
a number of delay devices. 

14 - Apparatus for random number generation according to 
25 claim 7 , characterized in that the data 

entrance of the delay device (s) (d„ dj being connec- 

ted to the PN-register (10) via XOR-gates, the output of 
the delay device (d l# . . . , dj further being connected to an 
XOR-gate (g lr gj via a feedback loop, the second 

30 signalling device parallelly delivering clocking signals to 

a number of delay devices . 

15. Method for random number generation wherein a random 
number generated by one apparatus is independent of a 
35 random number simultaneously generated by another appar- 

atus, wherein a PN-register (10) receives a clocking signal 
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from a first signalling device (1) , the PN-register (10) 
being connected to at least one delay device (d 1# . . . , dj , 
preferably a D-flip-flop, which from a second signalling 
device (2) receives an asynchronus, external signal and 
5 which thereupon produces a random number, charac- 
terized in that the data entrance of the delay 
device (d u . dj is connected to the PN-register (10) 
via a logical gate (g,, g n ) , preferably an XOR-gate, 
the output from the delay device (d w , dj furthermore 

10 being fed back to the XOR-gate (s) (g,, g n ) , and the 

fast clock (l) delivering signals with a clocking frequency 
f , which essentially exceeds the clocking frequency f 2 of 
the second signalling device (2) and parallelly delivering 
clock signals to the delay devices (d,, dj from the 

15 second signalling device (2) • 

16. Method according to claim 15, charac- 
terized in that the frequency, f,, of the fast clock 
(1) is so high that the PN-register (10) wraps around at 
20 least once between each signal delivered from the second 

signalling device (2). 
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